[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#32263: Splitting CGI-BIN



On Thu, Sep 19, 2002 at 11:26:54AM -0400, Brian White wrote:
> > What would y'all think about having cgi-bin managed more like, umm:
> >         /usr/lib/cgi-bin/
> >                 <packages dump CGI scripts in here willy-nilly>
> >         ~wwwdata/cgi-bin/
> >                 <packages make symlinks to /usr/lib/cgi-bin/blah in postinst,
> >                  based on some setting in /etc/ somewhere>
> This has how I've done my site, but it's a pain.  

It's only a pain because at the moment you have to make the symlinks
yourself, though, isn't it?

> Also, many webmasters
> run virtual websites and thus such symlinks would have to be done (or not
> done) for each webspace and that's not something can be easily automated.

Hrm. If they want the same CGI scripts on all their web sites, it's easy,
just point the cgi-bin alias for each vhost to the one directory.

If they want fine-grained control over their CGI scripts ("This client
only gets access to any given CGI script when it's approved by the
techies, and they pay $5"), then it's not an issue, since they'll be
making the symlinks by hand anyway.

It's only when they want fine-grained control of local CGI scripts,
but all the pre-packaged CGI scripts on each vhost, that we could do any
better. Of course, if they _really_ want that, they could just setup the
cgi-lib alias themselves. But I would've _thought_ the other two cases
would be the common ones, though?

Actually, fixing that'd be trivial too. Make your config file look like:

] $ cat /etc/cgi-scripts
] cgi-symlink-dirs="/var/www/cgi-bin /srv/foo.com/cgi-bin /srv/bar.com/cgi-bin"

and have an update-cgi script of some sort that does the parsing for you.

You could be a little bit more fine-grained too, if that was worthwhile.

Being able to easily disable a couple of prepackaged CGI scripts seems
like a common enough behaviour to optimise for.

Or maybe not, of course.

Cheers,
aj

-- 
Anthony Towns <aj@humbug.org.au> <http://azure.humbug.org.au/~aj/>
I don't speak for anyone save myself. GPG signed mail preferred.

 ``If you don't do it now, you'll be one year older when you do.''

Attachment: pgpP5jIoxDn5V.pgp
Description: PGP signature


Reply to: